Wolfgang Bumiller 53ec90e23e upload API: safer filename handling ...

Replace possibly-dangerous characters in uploaded filenames
with underscores, this includes spaces, colons, commas,
equal signs and any byte >= 128. Previously only spaces were
turned into underscores.

Also shell_quote the destination for scp.

Use '--' for some shell commands for safety.

Use brackets around the scp destination for ipv6 support.

2015-08-18 16:23:53 +02:00

12 KiB

Raw Blame History

View Raw